Changeset 33fa7d5 in mod_gnutls for test

Timestamp:

Jan 12, 2020, 4:34:33 PM (16 months ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, master, proxy-ticket

Children:

9bc842e

Parents:

5c9ca6b

Message:

Ensure stapling is active for server certificates with "must-staple"

RFC 7633, 4.3.2:

A server SHOULD verify that its configuration is compatible with the
TLS feature extension expressed in a certificate it presents.

Location:

test

Files:

• authority/subca/server/template.in (modified) (1 diff)
• tests/00_basic/apache.conf (modified) (1 diff)

test/authority/subca/server/template.in

@@ -5 +5 @@
 encryption_key
 dns_name="__HOSTNAME__"
+# must-staple
+tls_feature = 5
 __OCSP_URI__
 __IP_ADDRESSES__

test/tests/00_basic/apache.conf

@@ -6 +6 @@
  ServerName ${TEST_HOST}
  GnuTLSEnable On
- GnuTLSCertificateFile  authority/subca/server/x509-chain.pem
- GnuTLSKeyFile          authority/subca/server/secret.key
+ GnuTLSCertificateFile  authority/server/x509-chain.pem
+ GnuTLSKeyFile          authority/server/secret.key
 </VirtualHost>